Description
A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a login/?reason=failure&NTLM= URI.
Unscored
CVE-2019-16414
EUVD-2019-7156GHSA-8rg5-2cpw-hhhw
A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's clea…
Published Sep 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre